CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-0516

Medium Severity
Royal-elementor-addons
SVRS
30/100

CVSSv3
NA/10

EPSS
0.00297/1

CVE-2024-0516: A critical WordPress plugin vulnerability exists in the Royal Elementor Addons and Templates plugin. This flaw allows unauthenticated attackers to modify post metadata due to a missing capability check in the 'wpr_update_form_action_meta' function, affecting versions up to 1.3.87. With a low SOCRadar Vulnerability Risk Score (SVRS) of 30, while not immediately critical, this metadata manipulation could lead to potential website defacement or data compromise if exploited in conjunction with other vulnerabilities. The vulnerability, categorized under CWE-862 (Missing Authorization), could enable attackers to inject malicious content or redirect users. Although the CVSS score is 0, indicating minimal immediate impact as a standalone issue, the possibility for exploitation in the wild necessitates a prompt update to the latest plugin version to mitigate potential risks. Website administrators should prioritize patching their WordPress installations to prevent unauthorized modifications and maintain site integrity. Regular security audits are crucial for detecting and addressing vulnerabilities before they can be exploited.

In The Wild
2024-02-29

2025-01-08

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-0516 | Royal Elementor Addons and Templates Plugin up to 1.3.87 on WordPress wpr_update_form_action_meta authorization
vuldb.com2025-01-09
CVE-2024-0516 | Royal Elementor Addons and Templates Plugin up to 1.3.87 on WordPress wpr_update_form_action_meta authorization | A vulnerability, which was classified as critical, has been found in Royal Elementor Addons and Templates Plugin up to 1.3.87 on WordPress. Affected by this issue is the function wpr_update_form_action_meta. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2024
vuldb.com
rss
forum
news

Social Media

No tweets found for this CVE

Affected Software

Configuration 1
TypeVendorProduct
AppRoyal-elementor-addonsroyal_elementor_addons

References

ReferenceLink
[email protected]https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026824%40royal-elementor-addons%2Ftags%2F1.3.87&new=3032004%40royal-elementor-addons%2Ftags%2F1.3.88
[email protected]https://www.wordfence.com/threat-intel/vulnerabilities/id/d3457b87-c860-4cf2-ac3d-2c6521b629ea?source=cve
AF854A3A-2127-422B-91AE-364DA2661108https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026824%40royal-elementor-addons%2Ftags%2F1.3.87&new=3032004%40royal-elementor-addons%2Ftags%2F1.3.88
AF854A3A-2127-422B-91AE-364DA2661108https://www.wordfence.com/threat-intel/vulnerabilities/id/d3457b87-c860-4cf2-ac3d-2c6521b629ea?source=cve
[email protected]https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3026824%40royal-elementor-addons%2Ftags%2F1.3.87&new=3032004%40royal-elementor-addons%2Ftags%2F1.3.88
[email protected]https://www.wordfence.com/threat-intel/vulnerabilities/id/d3457b87-c860-4cf2-ac3d-2c6521b629ea?source=cve

CWE Details

CWE IDCWE NameDescription
CWE-862Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence